LogInit
Static task
static1
Behavioral task
behavioral1
Sample
fa3c45c102f150d9ea6b2ef02cacffa13a1619f6f05aa3cea038b077f3ad97ab.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fa3c45c102f150d9ea6b2ef02cacffa13a1619f6f05aa3cea038b077f3ad97ab.dll
Resource
win10v2004-20240802-en
General
-
Target
5ff1ce486ba37be387911a8fd8885b92.bin
-
Size
173KB
-
MD5
621dd06484425a5768cf8efb399e472f
-
SHA1
28542a179c31ec4b11408680f28f3d5d55be0758
-
SHA256
5d331768a52b940fbf9825506d3c7ded508b2c85db0bf896ebbd2f96d34dc7a9
-
SHA512
b270584012a531ac3a0c0fe6bc61e15170e1d603115948965c88f42f2e268ae320abf372e89b74c56abdea028f69d6a89bd675aba6e67b2c722a965d06ee0b5c
-
SSDEEP
3072:OeP4Ido1Rkq3mg7vE6Wj9LeZtM8sDbF0VvfAp3j6tJzLQiXJyJ197rAkhK3vhY:Oe5KmgzE6Wpq1xfWQTXJgz7ropY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/fa3c45c102f150d9ea6b2ef02cacffa13a1619f6f05aa3cea038b077f3ad97ab.exe
Files
-
5ff1ce486ba37be387911a8fd8885b92.bin.zip
Password: infected
-
fa3c45c102f150d9ea6b2ef02cacffa13a1619f6f05aa3cea038b077f3ad97ab.exe.dll windows:6 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 233KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gxfg Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.retplne Size: 512B - Virtual size: 140B
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ